Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: PPWCaZmXFLslKujXjr11Aw5qLcYiVl4jKmqK5hsP4Pw=
Subject key identifier: 0B:89:03:9A:C4:4C:A3:DE:A1:0A:66:AE:AE:08:FE:A2:9F:8C:BD:86
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019CABD97EAF8DF09CD4C41662FB5A8C3B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: k2k7d1FwS3D8WqUl++FkjiPmiyQ7zM0hi8A9ez5QTSQ=)
2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7e:af:8d:f0:9c:d4:c4:16:62:fb:5a:8c:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=0b89039ac44ca3dea10a66aeae08fea29f8cbd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:2b:41:2f:d3:df:6b:04:9e:0c:9c:45:3d:
aa:74:da:7d:95:38:e5:bd:06:20:a3:7f:ff:70:63:
a9:ea:43:f6:41:df:6a:0e:82:58:26:e5:5d:9c:79:
ad:ec:a6:c1:4e:a5:b2:08:46:36:2e:cd:4d:35:05:
74:a8:dc:e4:1a:ed:d2:13:bb:e9:f9:10:4a:b6:e5:
af:a8:02:cf:61:42:c2:de:29:d4:dd:79:8c:80:8a:
47:f5:ac:04:9e:52:76:93:2e:e3:b2:69:70:36:c1:
d0:c0:33:d1:b4:71:c6:fb:2d:18:a2:aa:0c:8b:ab:
5e:87:44:3b:7e:ee:89:02:af:6a:7a:88:e9:b4:df:
35:c8:11:a3:d2:38:01:b9:04:74:23:1f:2b:1f:69:
e4:93:2e:ba:c7:f0:37:fb:92:98:23:8a:2a:4f:d3:
5c:d4:31:37:18:e0:6b:a5:28:9d:cf:72:4b:bc:af:
21:e0:92:b6:b7:83:67:91:47:7f:ad:bc:86:a2:79:
4b:90:61:30:ec:e9:bd:82:6e:f1:dd:11:d0:d0:6e:
60:58:a1:04:47:53:91:8c:2a:20:91:88:24:d4:bf:
5e:6e:cd:69:10:c2:89:4f:43:67:1b:58:6c:2b:b5:
2f:21:f5:08:45:51:cf:ea:c8:71:b3:57:66:79:46:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:03:9A:C4:4C:A3:DE:A1:0A:66:AE:AE:08:FE:A2:9F:8C:BD:86
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:2f:fc:bf:92:0e:e5:d2:a8:4d:96:fb:4b:92:94:1e:2a:
cf:13:a3:c5:dd:ec:8e:de:00:4a:b9:83:87:d4:cf:46:cf:cb:
bb:67:1f:93:b8:ec:5d:0f:6e:e4:ca:57:7a:1d:64:2e:55:ba:
7c:17:cb:59:7b:ae:6f:55:00:ef:13:b6:78:6c:f7:61:fc:0f:
cb:d3:0a:90:f3:ba:2d:a0:30:7a:31:a2:37:65:49:46:9d:f3:
b7:04:c1:fe:3e:a5:4c:40:f8:70:79:21:22:40:6a:6f:c0:df:
70:9d:b9:af:a8:35:70:b8:03:df:c7:53:0e:29:d8:df:7e:59:
02:47:eb:44:e1:ad:10:22:75:d0:fe:c4:39:cb:cd:73:3f:5b:
e0:b6:cd:c7:21:32:50:c4:cb:91:b3:cc:8c:e7:b3:b2:26:58:
40:c1:35:f2:46:45:2f:2e:39:7a:64:20:a5:f2:f2:32:36:82:
2d:26:4d:88:20:87:60:c0:54:f7:d1:fa:5b:6a:44:48:54:2c:
e3:53:41:9a:62:4d:91:b7:96:9b:01:1f:42:9f:da:0f:5a:d5:
5e:83:4e:41:89:14:b5:71:2a:ab:f2:08:c0:b1:fc:4f:b1:22:
b9:6a:95:3c:62:e0:3c:f0:09:b9:2b:a8:16:61:d7:dd:21:f8:
24:04:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:45 2026 by rpki-client